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Top Stories 

• Nine people were injured in multiple collisions involving about 50 vehicles on Interstate 82 
near Kennewick, Washington, August 30 due to a dust storm which shut down the 
interstate for several hours while authorities investigated. - Kennewick Tri-City Herald 
(See item 10) 

• The Charlotte Mecklenburg Utility Department reported August 29 that an estimated 
15,000 gallons of sewage spilled into Briar Creek in North Carolina August 27 after a 
blockage of grease in a pipe. - Charlotte Observer (See item 21) 

• Fire crews reached 15 percent containment September 1 of the Happy Camp Complex Fire 
in Siskiyou County, California, which grew to more than 63,847 acres. - KHSL 12 Chico 
(See item 25) 

• Officials in Tennessee continued searching for the remaining 17 out of 32 teenagers who 
escaped from the Woodlawn Hills Youth Development Center in Nashville September 1 by 
crawling under a weak spot in a fence. - Associated Press (See item 27) 
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Energy Sector 

See item 1 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

1. August 28, Kennewick Tri-City Herald - (Washington) DOE agrees to pay $23.6M to 
Energy Northwest. The U.S. Department of Energy agreed to pay Energy Northwest 
around $23.6 million in damages for failing to provide for the disposal of used nuclear 
fuel that was agreed to in 1983. The agreement covers used fuel storage costs at the 
Columbia Generating Station near Richland between August 2006 and June 2012. 
Source: http://www.tri-citvherald.com/2014/08/28/3126278 doe-agrees-to-pay-236m- 
to-energy.html 
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Critical Manufacturing Sector 

2. September 1, IDG News Service - (International) Rigged industrial software site 
points to watering hole attack. Researchers at AlienVault reported that the Web site 
of an unnamed industrial software company was compromised with a piece of 
reconnaissance malware called Scanbox that collected information on visitors to the 
site, including visitors’ IP addresses, language, operating system, and security 
programs. The unnamed company produces system engineering and simulation 
software for several industries including manufacturing, automotive, and aerospace 
firms. 

Source: http://www.computerworld.com/article/2600767/security/rigged-industrial- 
software-site-points-to-watering-hole-attack.html 
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Defense Industrial Base Sector 

See item 2 
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Financial Services Sector 



3. September 1, KNBC 4 Los Angeles - (National) “AK-47 Bandit” wanted in SoCal 
bank robberies suspected in Nebraska heist. The FBI stated that the man responsible 
for the August 22 robbery of a First National Bank branch in southeast Nebraska 
matched the description of a suspect known as the “AK-47 Bandit” wanted in 
connection with several bank robberies in California, Washington, and Idaho beginning 
in 2012. The suspect was seen in bank robberies wielding an assault rifle and was 
involved in the shooting of a Chino, California police officer during a February 2012 
robbery. 

Source: http://www.nbclosangeles.com/news/local/AK-47-Bandit-Who-Shot-Chino- 
Officer-May-Have-Robbed-Nebraska-Bank-273425161.html 

4. September 1, WBBM 2 Chicago - (Illinois) Cicero police nab ‘No Boundaries 
Bandit’ suspect. Police in Cicero arrested a man August 31 believed to be the “No 
Boundaries Bandit” responsible for 12 bank robberies in the Chicago metro area. 
Source: http://chicago.cbslocal.com/2014/09/01/cicero-police-nab-no-boundaries- 
bandit-suspect/ 

For additional stories, see items 26 and 39 
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Transportation Systems Sector 

5. September 2, WKMG 6 Orlando - (Florida) Big rig driver in Lake Mary 1-4 crash 
fell asleep at wheel, Florida troopers say. Interstate 4 near Lake Mary Boulevard was 
closed for more than 3 hours when a semi-truck overturned on eastbound lanes after the 
driver crashed into a guardrail September 2. 

Source: http://www.clickorlando.com/overtumed-tractortrailer-closes-i4-near-lake- 
mary/27832044 

6. September 1, Associated Press - (Oregon) Interstate 84 reopens after shooting 
investigation in Portland. Interstate 84 in Portland reopened to traffic after being 
closed for 4 hours September 1 while authorities investigated an incident where a man 
was pointing a gun at passing cars on an offramp. The man surrendered after being shot 
and injured by an officer and was taken to a nearby hospital. 

Source: http://www.columbian.com/news/2014/sep/01/shooting-response-closes-i-84- 
traffic-backed/ 

7. August 31, KNSD 39 San Diego - (California) Flooding closes Balboa Park Bridge. 
Cabrillo Bridge in San Diego reopened to traffic August 31 after closing for roughly 12 
hours while crews worked to repair an air valve due to a water main break in El Prado. 
Source: http://www.nbcsandiego.com/news/local/Flooding-Closes-Balboa-Park- 
Bridge-27338885 1 .html 

8. August 31, Santa Clarita Valley Signal - (California) One killed, 8 injured in Castaic 
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freeway crash. One person was killed and 8 others were injured in a 3 -vehicle crash on 
northbound Interstate 5 in Castaic that closed 2 northbound lanes for more than 4 hours 
August 31. 

Source: http : //w w w. signalscv . com/section/3 6/article/ 127086/ 

9. August 31, Associated Press - (Colorado) Five passengers killed in Erie plane crash 
near Denver. Five passengers aboard a Piper PA-46 airplane were killed when it 
crashed near the Erie Municipal Airport north of Denver August 31. Authorities are 
investigating the incident. 

Source: http://www.nbcnews.com/news/us-news/five-passengers-killed-erie-plane- 
crash-near-denver-n 192871 

10. August 30, Kennewick Tri-City Herald - (Washington) Dust storm leads to about 50 
vehicles in collisions on 1-82. Nine people were injured in multiple collisions 
involving about 50 vehicles on Interstate 82 near Kennewick, Washington, August 30 
due to a dust storm which shut down the interstate for several hours while authorities 
investigated. 

Source: http://www.bellinghamherald.com/2014/08/30/3828939/interstate-82-entrance- 
closed.html 



11. August 30, KCRA 3 Sacramento - (California) ‘Suspicious’ fire forces closure of 
Garden Hwy. in Sac. A portion of Garden Highway in Sacramento was closed for 
about 2 hours due to a vegetation fire August 30. 

Source: http://www.kcra.com/news/local-news/news-sacramento/part-of-garden-hwy- 
closed-in-sacramento-due-to-fire/27809308 



12. August 30, KPIX 5 San Francisco - (California) 2 overturned big rigs on Hwy 4 in 
Antioch blocked lanes for four hours. State Highway 4 in Antioch was shut down for 
nearly 4 hours after semi-truck overturned on westbound lanes and blocked a portion of 
the highway August 30. Officers were responding to an unrelated motorcycle accident 
on westbound Highway 4 when reports of the overturned semi-truck were received. 
Source: http://sanfrancisco.cbslocal.com/2014/08/30/big-rig-overturns-antioch-blocks- 
traffic-highway/ 

For another story, see item 40 
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Food and Agriculture Sector 

13. September 1, Food Safety News - (Idaho) State halts raw milk sales from Idaho 
dairy. The Idaho Department of Agriculture ordered Treasured Sunrise Acres in 
Parma, Idaho, to halt sales of raw goat and cow milk until further notice after milk from 
the dairy tested positive for Cryptosporidium during the week of August 25. Two 
individuals were reportedly sickened after they consumed raw goat milk from the dairy. 
Source: http://www.foodsafetynews.com/2014/09/state-halts-raw-milk-sales-from- 
idaho-dairy 
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14. August 31, Portland Press Herald - (Maine) State: Recalled beef was handled 
improperly. Bubier Meats issued a voluntary recall August 29 of roughly 25,000 
pounds of beef from its Greene, Maine slaughterhouse after the spinal column tissues 
were not removed potentially allowing the transmission of bovine spongiform 
encephalopathy (BSE). Maine health officials detected the issue during a routine 
review of the company’s slaughter logs. 

Source: http://www.pressherald.com/2014/08/3Q/recalled-beef-showed-no-signs-of- 
mad-cow-disease/ 



15. August 30, Associated Press - (Minnesota) Cabbage likely caused Minnesota E. coli 
outbreak. Minnesota Department of Health officials reported August 29 that green 
whole head cabbage was likely the source of an E. coli outbreak that sickened 15 
individuals in July. Officials believe the cabbage was contaminated before the out-of- 
State supplier distributed it to at least 10 restaurants across Minnesota. 

Source: http://kimt.com/2014/08/30/cabbage-likelv-caused-minnesota-e-coli-outbreak/ 

16. August 29, U.S. Food and Drug Administration - (National) 4C Foods Corp. 
voluntarily recalls 4C Grated Cheese HomeStyle Parmesan because of Salmonella 
contamination. 4C Foods Corp., issued a recall August 29 for 308 cases of its 6-ounce 
containers of 4C Grated Cheese HomeStyle Parmesan due to possible Salmonella 
contamination. The recall was initiated after routine testing by the U.S. Food and Drug 
Administration revealed the potential risk for contamination. 

Source: http ://w w w .fda. go v/S afety/Recalls/ucm4 12309 .htm 

17. August 29, U.S. Environmental Protection Agency - (Nebraska) Settlements with pair 
of related Norfolk, Neb., pesticide companies to improve pesticide safety and 
reliability. Norfolk-based Earthworks Health LLC and Customer Feed Services Corp., 
which have common ownership, entered into an agreement with the U.S. 

Environmental Protection Agency (EPA) August 29 and will pay $74,513 in penalties 
to settle allegations that the companies produced and sold unregistered and misbranded 
pesticides. A November 201 1 investigation by the Nebraska Department of Agriculture 
on behalf of the EPA, found both companies out of compliance with federal regulations 
for the production and sale of copper sulfate and diatomaceous earth pesticides. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/d0cf6618525a9efb85257359003fb69d/e42al 

c6201f4934685257d4300700623 



18. August 29, U.S. Food and Drug Administration - (National) Kraft Foods Group 
voluntarily recalls select varieties of regular Kraft American Singles Pasteurized 
Prepared Cheese Product due to ingredient supplier's out-of-standard storage 
temperatures. The U.S. Food and Drug Administration announced August 29 that 
Kraft Foods Group issued a recall for 7,691 cases of 4 varieties of its regular Kraft 
American Singles Pasteurized Prepared Cheese Products due to the use of a supplier- 
provided ingredient that was not stored in accordance with Kraft’s temperature 
standards. The affected product was produced at Kraft’s Springfield, Missouri 
manufacturing facility and shipped to customers across the U.S. 
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Source: http://www.fda.gov/Safety/Recalls/ucm412283.htm 



For another story, see item 38 
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Water and Wastewater Systems Sector 

19. August 31, WZVN 26 Naples - (Florida) Boil water advisory for Burnt Store utilities 
service area. Charlotte Country Utilities issued a precautionary boil water advisory for 
Burnt Store Utilities’ customers across several areas August 31 until further notice due 
to a failure at the Burnt Store water treatment plant. 

Source: http://www.abc-7.com/story/26414340/boil-water-advisorv-for-bumt-store- 
utilities-service-area 



20. August 29, Sioux City Journal - (Iowa) Company fined $54,000 for dumping waste 
water in Sioux Center. Orange City-based Sioux-Preme Packing Co., agreed to pay 
$54,000 in penalties and an additional $23,000 after the company admitted to violating 
several environmental regulations when it released an illegal volume of waste water 
into a tributary of the West Branch Floyd River that killed an estimated 190,000 fish in 
October 2012. 

Source: http://siouxcityiournal.com/news/companv-fined-for-dumping-waste-water-in- 
sioux-center/article 53724e 1 9-e599-58b3-be7c-9 1 86a7462 1 9d.html 



21 . August 29, Charlotte Observer - (North Carolina) 100 dead fish found in Charlotte 
creek after sewage spill. The Charlotte Mecklenburg Utility Department reported 
August 29 that an estimated 15,000 gallons of sewage spilled into Briar Creek in North 
Carolina August 27 after a blockage of grease in a pipe. Crews cleared the pipe and 
also found 100 dead fish in the creek due to the spill. 

Source: http://www.charlotteobserver.com/2014/08/29/5137606/10Q-dead-fish-found- 
in-charlotte.html 
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Healthcare and Public Health Sector 

22. August 29, KHOU 11 Houston - (Texas) Memorial Hermann notifies patients of 
privacy breach. A former clinical employee at the Memorial Hermann Health System 
in Houston accessed 10,604 patients’ electronic medical records without authorization 
from December 2007 to July 2014, the hospital announced August 29. Patients’ were 
notified that their names, dates of birth, addresses, and some Social Security numbers 
were viewed in the breach. 

Source: http://www.khou.com/story/news/health/2014/08/29/memorial-hermann- 
notifies-patients-of-privacy-breach/1 4826833/ 

23. August 29, WRAL 5 Raleigh - (North Carolina) Patient info stolen from Duke Health 
office. Duke University Health System notified patients August 29 that an unencrypted 
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thumb drive containing patients’ names, medical record numbers, and physicians’ 
names was stolen from an administrative office in Durham in July. 

Source: http://www.wral.com/patient-info-stolen-from-duke-health-office/13936465/ 
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Government Facilities Sector 

24. September 2, WFAA 8 Dallas - (Texas) Trooper: 12 children injured in N. Texas 
school bus accident. Twelve students were transported to area hospitals with injuries 
September 2 after an accident involving a Waxahachie Independent School District bus 
that rolled over on Highway 879 in Texas. 

Source: http://www.khou.com/storv/news/local/texas/2014/09/02/iniuries-reported-in- 
rollover-accident-involving-waxahachie-isd-bus/14956923/ 

25. September 1, KHSL 12 Chico - (California) Happy Camp Complex Fire continues to 
grow. Fire crews reached 15 percent containment September 1 of the Happy Camp 
Complex Fire in Siskiyou County, California, which grew to more than 63,847 acres. 
Mandatory and advisory evacuation orders remained in place or were expanded to 
include additional areas around the Klamath National Forest. 

Source: http://www.actionnewsnow.com/news/happv-camp-complex-fire-continues-to- 
grow-72160/ 

26. August 29, New Orleans Times-Picayune - (Louisiana) Louisiana experiences second 
data breach with state-issued debit cards. JP Morgan Chase notified Louisiana’ s 
government that the company’ s security system was breached and hackers may have 
accessed the personal information of residents using prepaid debit cards issued by 3 
State agencies. 

Source: 

http://www.nola.com/politics/index.ssf/2014/08/louisiana experiences second d.html 
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Emergency Services Sector 

27. September 2, Associated Press - (Tennessee) More than 30 teen felons escape from 
Tennessee detention center. Officials in Tennessee continued searching for the 
remaining 17 out of 32 teenagers who escaped from the Woodlawn Hills Youth 
Development Center in Nashville September 1 by crawling under a weak spot in a 
fence. Authorities stated that the teens broke out during a shift change and order was 
restored by September 2. 

Source: http://www.foxnews.com/us/2014/09/02/official-more-than-30-teens-escape- 
from-nashville-detention-center- 17- still-at/ 
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Information Technology Sector 



28. September 2, Softpedia - (International) FBI starts investigation of celeb photo hack. 
The FBI stated that it began an investigation to identify and apprehend the individuals 
behind a leak of personal photos belonging to several celebrities that were stored in 
Apple’s iCloud service. 

Source: http://news.softpedia.com/news/FBI-Starts-Investigation-of-Celeb-Photo-Hack- 
457278.shtml 

29. September 2, The Register - (International) SHARE ‘N’ SINK: OneDrive corrupting 
Office 2013 files. Users of Microsoft’s OneDrive cloud service began reporting August 
27 that some Microsoft Office 2013 files stored on OneDrive were inaccessible. Users 
found that only individuals running Windows 8.1 appeared to be affected and that 
syncing OneDrive to a computer running Windows 7 would make the files accessible 
again. 

Source: 

http://www.theregister.co.uk/2014/09/02/share n sink onedrive corrupting office 20 
13 files/ 

30. September 2, The Register - (International) iOS phone phlaw can UNMASK 
anonymous social media users. Researchers found that users of iOS devices could 
have their phones forced to dial numbers without prompting or have photos taken 
through their phone’s cameras due to a feature in iOS that is not properly implemented 
in several popular services such as Twitter, Google, and Facebook. 

Source: 

http://www.theregister.co.uk/2014/09/02/crap ios schema can reveal anonymous soc 
ial media users/ 

31. September 2, IDG News Service - (International) Namecheap says accounts 
compromised in hacking incident. Hosting provider Namecheap reported September 
1 that several of its users’ accounts were compromised using brute force attacks to gain 
control of accounts. 

Source: http://www.computerworld.com/article/2600779/securitv/namecheap-says- 
accounts-compromised-in-hacking-incident.html 

32. September 1, Securityweek - (International) Tor-enabled Bifrose variant used in 
targeted attack. Trend Micro researchers identified a new variant of the Bifrose 
backdoor after it was used in an attack on an unnamed device manufacturer. The new 
variant uses the Tor network for command and control communications and can 
perform actions including downloading and uploading files, deleting content, and 
performing actions as the infected user. 

Source: http://www.securityweek.com/tor-enabled-bifrose-variant-used-targeted-attack 

33. August 29, Softpedia - (International) MangaGamer alerts customers of security 
breach. Games distributor MangaGamer informed its customers that it was the victim 
of a data breach that may have exposed customers’ email addresses, usernames, and 
passwords. The company advised users to change their passwords and indicated that no 
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financial information was compromised. 

Source: http://news.softpedia.com/news/MangaGamer-Alerts-Customers-of-Security- 
Breach-456948.shtml 



34. August 29, SC Magazine - (International) Syrian Malware Team makes use of 
enhanced BlackWorm RAT. FireEye researchers reported that a hacktivist group 
known as the Syrian Malware Team has used an enhanced version of the BlackWorm 
remote access trojan (RAT) known as “Dark Edition” in its campaigns. The new variant 
allows attackers to bypass user account control (UAC) features, spread itself over 
network drives, and disable firewalls. 

Source: http://www.scmagazine.com/syrian-malware-team-makes-use-of- 
enhanced-blackworm-rat/article/3 68902/ 



For another story, see item 2 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

35. September 1, News 12 New Jersey - (New Jersey) 5 businesses destroyed in fire at 
Village Plaza strip mall in Westfield. A 4-alarm fire at a Westfield strip mall in New 
Jersey September 1 caused a partial roof collapse and destroyed 5 businesses located 
inside the structure. 

Source: http://newjersev.newsl2.com/news/5-businesses-destroved-in-fire-at-village- 
plaza- strip-mall-in- westfield- 1.9 198535 

36. September 1, Birmingham News - (Alabama) 2 killed, 2 wounded in gunbattle 
outside Birmingham biker club. Two individuals were killed and 2 others injured 
August 31 when at least 40 rounds were fired during a shooting outside Showstoppers 
Motorcycle Club in Birmingham. Police are investigating the incident which they 
believe may be related to motorcycle club rivalries. 

Source: 

http://www.al.eom/news/birmingham/index.ssf/2014/09/2 killed 2 wounded in gunb 
attl.html 
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37. August 31, Waterloo-Cedar Falls Courier - (Iowa) Bomb detonated at Waterloo 
park. Police responded to the Riverview Recreational Area in Waterloo August 30 and 
detonated a homemade explosive device made of sections of pipe and nails that was 
found by a volunteer cleaning the park. Authorities are investigating the incident. 
Source: http://wcfcourier.com/news/local/crime-and-courts/bornb-detonated-at- 
waterloo-park/article 4 1 6a47 6d-0 1 79-5 607-9049-c0ced0c0 189b .html 

38. August 30, Hillsdale Daily News - (Michigan) Festival attendees contract 
salmonella. Health officials confirmed August 30 that a Salmonella outbreak at the 
Reading Summer Festival Days in Hillsdale likely sickened 41 individuals, including 8 
confirmed cases, after they attended an August 2 dinner at the festival. 

Source: http://www.hillsdale.net/article/20140830/NEWS/140839965 

39. August 29, Reuters - (Florida) Man charged with wire fraud in $1 mi llion Miami 
Heat ticket scam. Florida authorities charged a man already incarcerated in Ohio on 
real estate fraud charges, for operating an investment scheme that defrauded investors 
and the Miami Heat NBA team out of millions of dollars. The man allegedly used a 
false identity to purchase a Miami Heat ticket package and obtained a loan and millions 
of dollars from investors for a fake investment opportunity. 

Source: http://news.vahoo.com/man-charged-wire-fraud-l-million-miami-heat- 
17 1621060— nba.html 
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Dams Sector 

40. September 2, Omaha World-Herald - (Iowa) Neighborhood in Missouri Valley, 
Iowa, evacuated after levee break; cleanup in Denison. The Boyer River levee 
breached September 1 following an August 31 storm that produced heavy rains and 
high winds and prompted approximately 70 residents in southeast Missouri Valley, 
Iowa, to evacuate. State Highway 39 was flooded after water broke through a farm 
retention dam in Denison. 

Source: http://www.omaha.com/news/iowa/neighborhood-in-missouri-valley-iowa- 
evacuated- after-levee -break/article_c53 1 5 642-3 1 fe- 1 1 e4- 80ad-00 1 a4bcf687 8 .html 
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NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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